4902 matches found
CVE-2025-2204
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tapandsign Technologies Software Inc. Tap&Sign allows Cross-Site Scripting XSS. This issue affects Tap&Sign: through 23012026. NOTE: The vendor was contacted early about this disclosure but...
CVE-2025-2204
Technical details about CVE-2025-2204 are not publicly available in the provided documents. Monitor for updates.
CVE-2025-2204
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tapandsign Technologies Software Inc. Tap&Sign allows Cross-Site Scripting XSS. This issue affects Tap&Sign: through 23012026. NOTE: The vendor was contacted early about this disclosure but...
CVE-2025-2204 XSS in Tapandsign Technologies' Tap&Sign App
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tapandsign Technologies Software Inc. Tap&Sign allows Cross-Site Scripting XSS. This issue affects Tap&Sign: through 23012026. NOTE: The vendor was contacted early about this disclosure but...
Tap&Sign cross-site scripting vulnerabilities
Tap&Sign is a user-friendly and legally binding electronic signature solution provided by Tap&Sign Corporation. Versions of Tap&Sign prior to 23012026 contained a cross-site scripting vulnerability, which was caused by improper input handling and could lead to cross-site scripting attacks...
PT-2026-4350
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tapandsign Technologies Software Inc. Tap&Sign allows Cross-Site Scripting XSS.This issue affects Tap&Sign: through 23012026. NOTE: The vendor was contacted early about this disclosure but d...
CVE-2025-2204: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tapandsign Technologies Software Inc. Tap&Sign allows Cross-Site Scripting XSS. This issue affects Tap&Sign: through 23012026. NOTE: The vendor was contacted early about this disclosure but...
Automated FortiGate Attacks Exploit FortiCloud SSO to Alter Firewall Configurations
Cybersecurity company Arctic Wolf has warned of a "new cluster of automated malicious activity" that involves unauthorized firewall configuration changes on Fortinet FortiGate devices. The activity, it said, commenced on January 15, 2026, adding it shares similarities with a December 2025 campaig...
ROS-20260122-73-0013
A vulnerability in the DevTools component of the Google Chrome browser is related to an unexpected sign extension. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...
Malicious code in sign-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e300b5f52fc165080a7c0a9eee170ee453c31a0419dc65e004a64b0749b699cf The package sign-client was found to contain malicious code. Source: ghsa-malware d46bf80205dc64dc9e6d65d1208f0b6e1a978d8dfdd555fbb2c9eb31805df69c An...
Malicious Package
Overview sign-client is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...
EUVD-2026-3742
Malicious code in sign-client npm...
MAL-2026-429 Malicious code in sign-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e300b5f52fc165080a7c0a9eee170ee453c31a0419dc65e004a64b0749b699cf The package sign-client was found to contain malicious code. Source: ghsa-malware d46bf80205dc64dc9e6d65d1208f0b6e1a978d8dfdd555fbb2c9eb31805df69c An...
CVE-2025-66523
URL parameters are directly embedded into JavaScript code or HTML attributes without proper encoding or sanitization. This allows attackers to inject arbitrary scripts when an authenticated user visits a crafted link. This issue affects na1.foxitesign.foxit.com: before 2026‑01‑16...
kernel security update
6.12.0-124.28.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...
MiracleLinux 8 : dotnet6.0-6.0.120-1.el8.ML.1 (AXSA:2023-6237:19)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6237:19 advisory. dotnet: race condition in Core SignInManager PasswordSignInAsync method CVE-2023-33170 Tenable has extracted the preceding description block directly from th...
MiracleLinux 9 : dotnet7.0-7.0.109-1.el9.ML.1 (AXSA:2023-6231:22)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6231:22 advisory. dotnet: race condition in Core SignInManager PasswordSignInAsync method CVE-2023-33170 Tenable has extracted the preceding description block directly from th...
AWS VDP: Password Reuse Vulnerability on AWS Sign-in Page via Password Reset Flow leads to Security Policy Violation
Asset URL: ██████ Summary: The AWS sign-in page allows users to reuse old passwords when resetting their password, which violates security best practices outlined in OWASP Authentication Cheat Sheet and NIST 800-63B Digital Identity Guidelines. This misconfiguration could potentially weaken accou...
